model-registry-model-signature-verification
Installation
SKILL.md
Model Signature Verification in Model Registries
Security Requirement
Model registries SHOULD be capable of verifying the cryptographic signature of models to validate their provenance. This ensures that only models from trusted sources are stored and distributed.
When to Verify
| Event | Action |
|---|---|
| Model upload | Verify signature before accepting the model into the registry |
| Model download | Provide signature for consumers to verify (or re-verify on their behalf) |
| Periodic audit | Re-verify signatures of stored models to detect storage-level tampering |